In message <[EMAIL PROTECTED]>, `Michael Bell <[EMAIL PROTECTED]>' wrote: > GOTOU Yuuzou wrote: > > 1. We successed in signing the root-CA's self-signed > > certificate. But it cannot be be exported. We tried to > > export "CA-Certs" in "Input and Output" menu, and we got > > blank screen and any errors log. > > Sounds like a bug. I will verify it. When do you download the pre-RC7?
Its timestamp is as follows: % env TZ=0 LANG=C ls -l openca-0.9.1-RC7.tar.gz -rw-r--r-- 1 gotoyuzo gotoyuzo 2995632 Oct 25 14:48 openca-0.9.1-RC7.tar.gz > > 2. We created CSR in sub-CA. We can export it to be signed > > by another CA. But we aren't understanding how to import > > and sign it in root-CA. > > * Go to a computer from which you can reach the public interface of the > root-CA. > > * Extract the PEM-request from the floppy (use tar). > > * Go to the public interface with your browser. There you can request a > certificate. > > * Use the form to request a server-certificate. The name was choosen > because the most people who has a PKCS#10-request creates this request > for a server. > > * Simply upload the request and use Sub-CA as role. > > * Now you can handle this request like any other request. Thanks, I successed in signing certificate on root-CA. To import signed certificate into sub-CA, I had to create tar archive which contains the certificate named "cacert.pem". In this time, I made it in manualy. Is there a simple way to make it for sub-CAs? > Please check the extensionconfiguration Sub-CA.ext in > OPENCADIR/etc/openssl/extfiles to be correct. NsComment and some URL parameters were applyed by configure sctipt. It seems heving correct values. Thanks for your help. -- gotoyuzo ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
